Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218876.roa
File: AS218876.roa (raw, json)
Hash identifier: D2Mk3iZT2Woi3DdXRHL6T6tZVBIWmvo8p7tATeH3W/w=
Subject key identifier: 06:6A:3A:2E:8D:28:B9:27:18:0D:F4:CA:DA:88:DC:3F:A3:4F:41:11
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7EB0154D7E866B01AC01BDD17594E619D23DACBC
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218876.roa
Signing time: Sun 11 Oct 2026 12:33:14 +0000
ROA not before: Sun 11 Oct 2026 12:28:14 +0000
ROA not after: Sun 10 Oct 2027 12:33:14 +0000
asID: 218876
IP address blocks: 2a14:7583:8100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b0:15:4d:7e:86:6b:01:ac:01:bd:d1:75:94:e6:19:d2:3d:ac:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 11 12:28:14 2026 GMT
Not After : Oct 10 12:33:14 2027 GMT
Subject: CN=066A3A2E8D28B927180DF4CADA88DC3FA34F4111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:1c:a8:c6:80:5d:8b:56:01:cc:87:9c:ec:
10:8f:5a:24:70:bd:ad:23:86:96:33:75:e0:54:0e:
58:cf:e8:02:95:24:35:1e:62:07:1d:67:08:ed:2f:
52:d6:83:33:1e:2d:27:a8:73:db:bb:27:b6:d2:5b:
f1:e7:31:f1:64:35:1b:3b:f6:91:e6:d4:28:2c:54:
42:01:c5:e1:d5:4b:75:ee:12:23:77:50:45:ff:93:
61:4e:6b:44:a7:23:dd:4b:14:1b:24:79:a0:95:70:
79:a3:e2:01:73:68:eb:c7:53:ec:40:e4:0a:80:c0:
d0:50:3f:f9:69:0b:dd:74:e1:85:7a:b9:8b:96:5d:
47:a6:15:1c:3c:13:03:88:19:26:18:f1:6b:76:f5:
c2:d5:31:10:75:4b:f0:c2:70:de:dd:11:3b:cd:a9:
d2:09:dd:41:92:5d:f5:56:ca:0c:b4:d8:27:3a:fa:
3f:f5:14:98:98:53:8c:32:fd:99:35:3c:38:c4:39:
ba:09:ea:05:08:1e:9e:63:31:71:da:a2:66:e1:bf:
3d:dd:1d:e5:16:96:7f:33:55:65:53:5e:47:47:de:
63:39:16:bd:6e:0b:7a:8f:fc:79:f1:cf:83:bc:3e:
5a:3e:15:69:31:39:98:a0:32:f2:ad:2c:52:94:9e:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6A:3A:2E:8D:28:B9:27:18:0D:F4:CA:DA:88:DC:3F:A3:4F:41:11
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218876.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:8100::/40
Signature Algorithm: sha256WithRSAEncryption
0b:78:40:40:b7:5e:d5:b4:ba:99:9c:36:c0:37:15:c3:ee:6d:
3e:1b:9c:53:00:b5:ac:e4:bc:e6:c7:6a:95:2d:9c:fc:d9:27:
17:f0:62:09:b5:99:e6:71:c9:13:05:55:6f:b3:83:c5:0b:f7:
5c:b9:78:ca:21:f2:d4:c3:67:35:0c:35:55:34:40:67:7a:ad:
38:e1:d1:14:de:e3:fa:ec:bf:f8:48:1a:2a:3a:d8:c4:e9:50:
28:31:ee:21:ae:2c:d9:53:eb:27:2a:71:a7:44:c3:fd:a0:b9:
db:a5:a7:c6:9e:61:d5:01:5d:99:f3:8b:ed:5e:16:b5:8a:c9:
8e:1d:88:39:16:40:82:77:ce:3d:80:26:9e:2f:43:89:4c:2a:
fd:78:71:02:ec:ea:70:e8:3a:f3:7c:ec:90:c3:db:3a:d6:4b:
6e:b2:e8:3f:b6:dd:5e:6f:82:a3:2a:03:16:e4:6a:0e:3b:7f:
c9:e9:6e:0b:04:61:7a:02:87:68:c3:7c:f4:ed:d4:ae:67:3c:
71:38:1a:06:a1:2f:bf:19:c4:1d:81:b7:a3:df:91:b9:a7:ca:
1e:42:d5:ce:26:dd:95:01:c7:35:fb:7b:ed:7c:23:3c:cc:3b:
cc:b1:4c:3e:ef:f7:61:b1:dc:06:1c:f0:47:82:c5:30:5a:e3:
3d:d4:5c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:10:03 2026 by rpki-client